Your cart is empty
Last Updated: May 2025
At Cloudstate, your privacy - and the privacy of the girls who trust us with their questions - matters. This Privacy Policy explains what information we collect through the Girlhood platform and any related Cloudstate websites, applications, purchases, and services (together, the “Services”), how we use and protect it, and the choices available to you. Because many of our members are minors, this Policy includes specific protections required under the Children's Online Privacy Protection Act (COPPA) - see Section 4 if you are a parent or guardian.
This Policy applies to visitors to our site, Girlhood members, and anyone who purchases merchandise or a membership from Cloudstate. Girlhood currently serves members ages 13 to 26. A future phase of the platform ("Phase 2," expected in 2027) is intended to extend the Services to members under 13, subject to the additional protections described in Section 4, which are being finalized with our privacy attorney before that phase launches.
Date of birth: collected at signup, used to route you to the correct experience and consent flow, and for no other purpose.
Email address: used for account access and communications.
Optional display name.
The content you post: questions, answers, and reactions.
Basic usage data (login frequency, session length): aggregated and anonymized; not retained at an individual level beyond 90 days.
Technical information (IP address, browser and device type, referring URL) collected automatically to operate and secure the Services.
Not applicable for Phase 1 of Girlhood Platform. In a future Phase of Gilrhood (Phase 2 or 3), if your access is granted through identity verification rather than a member invitation, we or a trusted third-party verification provider may briefly collect a government-issued ID or equivalent to confirm your eligibility. This information is used solely for that purpose and is not retained by Cloudstate any longer than necessary to complete the check.
Every applicant submits a short introductory video as part of our human review process. It is reviewed by our team and deleted within 30 days of approval or rejection - we do not store it permanently.
Shipping address, billing details, and payment information (processed through a secure third-party payment processor - we do not store full payment card numbers), and your order history.
Anything you choose to share with us directly - through contact forms, ambassador program applications, giveaways, or surveys.
Content flagged for review, and records of any resulting moderation action, are retained for a minimum of two years for safety, legal, and compliance purposes, as described in Section 5.
Operate, personalize, and secure the Services, and route you to the appropriate age-based experience.
Enable peer support, respond to your questions, and moderate content to keep the community safe.
Fulfill purchases, process payments, and manage membership subscriptions.
Communicate with you about your account, orders, or a safety concern.
Send marketing communications only if you - or, for members under 18, a parent or guardian - have opted in. We do not use targeted advertising directed at members under 17 under any circumstance.
Improve the Services, including through aggregated or de-identified analysis.
Comply with legal obligations, including the safety reporting described in Section 5.
If a signup indicates an applicant is under 13, the following will apply:
We ask for a parent or guardian's email address and require the parent or guardian to confirm consent before the account is activated.
We collect only the minimum information necessary from members under 13, and never use it for targeted advertising or share it with third parties for their own purposes.
We do not use a member's personal information to train or develop AI systems without separate, verifiable parental consent, obtained independently of the general consent described above.
A parent or guardian may review the information we've collected, revoke consent, and request deletion of their child's account and data at any time by contacting hello@mycloudstate.com. We complete deletion requests within 30 days.
Participation is never conditioned on a child disclosing more personal information than is reasonably necessary.
We do not knowingly collect personal information from anyone under 13 outside of this consent process. If we learn that we have, we delete it promptly.
Date of birth: retained for the duration of membership; deleted within 30 days of account closure.
Email address: retained for the duration of membership, plus 12 months after closure for legal and security purposes.
Parent/guardian email (Phase 2): retained only until consent is confirmed, then deleted unless needed for compliance records.
Intro video: deleted within 30 days of approval or rejection.
Posted content: retained during membership; deleted within 30 days of account closure upon request.
Usage data: aggregated and anonymized; not retained at the individual level beyond 90 days.
Moderation and safety escalation records: retained for a minimum of 2 years for legal and safety purposes.
Purchase and order records: retained as required for tax, accounting, and legal purposes.
We use encrypted connections (SSL/TLS) and limit access to member data to team members with a demonstrated need. We maintain a written information security program governing how member data is stored, protected, and accessed, and a documented breach response plan, including notification to affected members (and parents, where applicable) and regulators where required by law.
We use cookies to remember your preferences, understand how the Services are used, and improve performance. You can disable cookies through your browser settings, though some features may not work properly without them.
We share information only with trusted vendors who help us operate the Services - for example, our email platform, payment processor, and analytics tools - and only to the extent needed for them to perform those services. Every vendor handling member data is reviewed for data protection practices before we work with them. We do not sell member data, and we do not share it with third parties for their own marketing purposes. We will not share your Text message opt-in or consent status with any third party for purposes unrelated to providing the messaging service.
We may use automated tools - for example, keyword and phrase filtering - to help flag potentially unsafe content for human review. We do not use a minor member's personal information to train or develop AI systems without separate, verifiable parental consent obtained specifically for that purpose.
Access: request a copy of the personal information we hold about you.
Correction: update inaccurate information in your account.
Deletion: request deletion of your account and associated data; completed within 30 days.
Opt-out: opt out of non-essential data collection (such as usage analytics) or marketing communications at any time, without losing access to the Services.
Parents and guardians of members under 18 may exercise these rights on their child's behalf by contacting hello@mycloudstate.com.
If Cloudstate is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, member information - including personal information collected from members under 18 - may be transferred to the successor or acquiring entity as part of that transaction. Any successor will be bound by the commitments in this Privacy Policy with respect to information collected before the transfer, unless members are given notice of and an opportunity to consent to materially different practices.
If a transaction would result in materially different use of a minor member's personal information than what's described in this Policy, we will notify the affected member's parent or guardian and provide an opportunity to review, object to, or request deletion of that information before the transfer takes place, consistent with our obligations under COPPA.
We may update this Privacy Policy from time to time. If we make material changes, we will notify members via in-platform notification and email before the changes take effect.
Questions about this Policy or your data: hello@mycloudstate.com
If you are in a mental health crisis right now: Crisis Text Line (text HOME to 741741) or the 988 Suicide & Crisis Lifeline (call or text 988) - both free and available 24/7.